Privacy Policy

Last Updated: June 23, 2026

This Privacy Policy explains how Gather Software, LLC ("Gather," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our website at usegather.cloud (the "Website"), our software platform, and related services (collectively, the "Services").

A Note on Our Two Roles: Controller vs. Processor

Gather handles personal information in two very different capacities, and this Privacy Policy applies to only one of them.

1. Information we control (covered by this Policy). When you visit our Website, request a demo, sign up for an account, contact us, or otherwise interact with Gather as a company, we decide how and why your personal information is used. We act as a controller of that information, and this Privacy Policy describes those practices.

2. Customer content we process on our customers' behalf (NOT covered by this Policy). Gather's core function is to gather, extract, standardize, and route portfolio and KPI data from investor communications. When a customer (for example, an angel network, venture fund, or family office) uses Gather to process founder updates, portfolio company metrics, investor communications, or other data they submit or connect to the platform ("Customer Content"), Gather acts as a processor (or "service provider") on that customer's behalf. Our handling of Customer Content is governed by the agreement and Data Processing Addendum ("DPA") we have with that customer — not by this Privacy Policy.

If you are a founder, portfolio company, or other individual whose information appears in Customer Content and you have questions about how it is used, please contact the Gather customer (the investor, fund, or network) that controls that data. We will refer such requests to the relevant customer.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Categories of Personal Information We Collect

The information we collect as a controller depends on how you interact with us. It may include:

CategoryExamples
IdentifiersName, email address, company/firm name, job title, mailing address, phone number, IP address, account user ID.
Account & Billing RecordsAccount credentials (stored in hashed form), subscription plan, billing contact, and limited payment-related records received from our payment processor (we do not store full card numbers).
Commercial InformationProducts and Services purchased or considered, demo requests, subscription history, and invoices.
Internet & Device ActivityBrowsing activity on the Website, pages viewed, referring URLs, interactions with emails and ads, browser type and version, operating system, device identifiers, screen resolution, and cookie data.
Coarse GeolocationCity, state, and country inferred from IP address.
CommunicationsRecords of your interactions with us, including support requests, sales calls, chat messages, and meeting notes when you meet with our team.

We do not intentionally collect sensitive personal information (such as government IDs, health data, or precise geolocation) through the Website.

2. Sources of Personal Information

We collect personal information from the following sources:

  • Directly from you — when you fill out a form, book a demo, create an account, contact support, or communicate with us.
  • Automatically — through cookies, analytics, and similar technologies when you use the Website (see our Cookie Policy).
  • From third parties — including:
    • Sales and data-enrichment providers (e.g., contact-enrichment and prospecting tools) that supply business contact information about prospective customers;
    • Our CRM and marketing platform (HubSpot), which records your interactions with our communications and forms;
    • Referral and partner sources, where someone introduces you to Gather;
    • Our payment processor (Stripe), which provides us with limited contact and transaction information so we can manage billing (we do not receive full payment card numbers); and
    • Our analytics and session-replay providers, as described below.

3. How We Use Personal Information

We use personal information for the following purposes:

  • Provide and operate the Services — create and manage accounts, authenticate users, deliver platform functionality, and provide support.
  • Communicate with you — respond to inquiries, schedule and conduct demos, send service-related notices, and (where permitted) send marketing and product updates.
  • Sales and marketing — qualify leads, manage our pipeline, measure campaign performance, and tailor outreach.
  • Improve and develop the Services — understand how the Website and platform are used, troubleshoot issues, and develop new features.
  • Billing and administration — process subscriptions and payments and maintain business records.
  • Security and fraud prevention — protect the Services, our users, and our business.
  • Legal and compliance — comply with applicable law and enforce our agreements.

Use of Artificial Intelligence

Gather uses artificial intelligence and large language model technology to extract and standardize data within the Services, and may use AI to power features such as Website chat. Where AI is applied to Customer Content, that processing is governed by the applicable customer agreement and DPA. We do not use Customer Content to train third-party foundation models, and our AI subprocessors are contractually restricted from doing so. Where AI is applied to your interactions with us as a controller (for example, a Website chatbot), conversations may be logged and reviewed to operate and improve the feature.

4. How We Disclose Personal Information

We do not sell personal information for money. We may disclose personal information as follows:

  • Service providers / subprocessors — vendors that perform functions on our behalf under contract, including:
    • Supabase — application hosting, authentication, and data storage;
    • HubSpot — CRM, marketing automation, forms, and chat;
    • Calendly — demo and meeting scheduling;
    • Google (Analytics / Tag) — website analytics;
    • Contentsquare (Hotjar) — session replay and heatmap analytics;
    • Anthropic — AI/LLM processing used to power extraction and chat features;
    • Make / Zapier — workflow automation between the tools above;
    • Stripe — subscription billing and payment processing.
  • Professional advisors — attorneys, accountants, and other advisors, in their capacity as advisors to us.
  • In a business transaction — in connection with a merger, acquisition, financing, due diligence, or sale of all or part of our business, personal information may be transferred to the successor or acquirer.
  • Legal and safety — to comply with law, respond to lawful requests, enforce our agreements, or protect the rights, property, or safety of Gather, our users, or others.

A current list of subprocessors used for Customer Content is maintained for customers under their agreement and DPA.

5. Targeted Advertising and "Sharing"

We may use cookies and similar technologies (for example, through HubSpot or Google) to measure and deliver marketing. Depending on your jurisdiction, certain of these activities may be considered "sharing" or "targeted advertising." You can opt out of these technologies through your cookie preferences and the controls described in our Cookie Policy and in Section 8 below.

6. Cookies, Analytics, and Session Replay

We use cookies, pixels, and similar technologies on the Website. For details on what we use and how to control them, please see our Cookie Policy.

We use Google Analytics to understand how visitors use the Website, and Contentsquare (Hotjar) for session replay and heatmap analytics. These tools collect information about your interactions with the Website — such as pages viewed, clicks, mouse movements, scrolling, and content you enter (excluding fields suppressed as sensitive) — in pseudonymized form, to help us diagnose issues and improve the experience. Our providers are contractually restricted from selling this data.

If you are in the EEA, UK, or Switzerland, we set non-essential cookies and run analytics and session-replay tools only after you provide consent through our Cookie Preferences settings, where you can change your choices at any time.

7. Data Retention

We retain personal information for as long as needed for the purposes described in this Policy:

  • Business customers and account data — for the duration of the business relationship and a reasonable period afterward;
  • Prospect and marketing data — until you opt out or the information is no longer useful for our purposes;
  • Records required by law — for as long as required by applicable legal, tax, and accounting obligations.

We may retain de-identified or aggregated data, which is no longer personal information, for any lawful purpose.

8. Your Privacy Choices and Rights

Everyone

  • Marketing emails — you can unsubscribe using the link in any marketing email. Service and account messages will still be sent.
  • Cookies and targeted advertising — manage your preferences through Cookie Preferences and the controls in our Cookie Policy.

U.S. State Privacy Rights

Depending on your state of residence (for example, California, Virginia, Colorado, Connecticut, and others), you may have the right to:

  • Know and access the personal information we hold about you;
  • Correct inaccurate personal information;
  • Delete personal information;
  • Opt out of "sale," "sharing," or targeted advertising; and
  • Not be discriminated against for exercising your rights.

California residents may also request information about disclosures for direct marketing under California's "Shine the Light" law.

EEA, UK, and Swiss Rights (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you may have rights to access, rectify, erase, restrict, or object to processing of your personal information, and to data portability and withdrawal of consent. Our lawful bases for processing include legitimate interests, performance of a contract, consent, and legal obligation. You also have the right to lodge a complaint with your local data protection authority.

How to Exercise Your Rights

Submit a request to info@usegather.cloud. We will verify your identity before responding and will respond within the timeframes required by applicable law. If you are an individual whose information appears in Customer Content, we will refer your request to the relevant Gather customer.

9. International Data Transfers

Gather is based in the United States, and we process personal information in the United States and in other countries where our service providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

10. Data Security

We use reasonable and appropriate administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

11. Children's Privacy

The Services are intended for businesses and individuals who are at least 18 years old. We do not knowingly collect personal information from anyone under 18.

12. Third-Party Links

The Website may link to third-party sites and services that we do not control. This Policy does not apply to those sites, and we are not responsible for their content or privacy practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last Updated" date and, where appropriate, provide additional notice. Your continued use of the Services after an update constitutes acceptance of the revised Policy.

14. Contact Us

Gather Software, LLC

Email: info@usegather.cloud

Mailing address: 1229 Millwork Ave, Suite 304, Omaha, NE 68102